scdeny

package

v1.14.4 Latest Latest Go to latest Published: Jul 4, 2019 License: Apache-2.0 Imports: 5 Imported by: 0

Details

View Source

const PluginName = "SecurityContextDeny"

PluginName indicates name of admission plugin.

This section is empty.

func Register(plugins *admission.Plugins)

Register registers a plugin

type Plugin struct {
	*admission.Handler
}

Plugin implements admission.Interface.

func NewSecurityContextDeny() *Plugin

NewSecurityContextDeny creates a new instance of the SecurityContextDeny admission controller

func (p *Plugin) Validate(a admission.Attributes, o admission.ObjectInterfaces) (err error)

Validate will deny any pod that defines SupplementalGroups, SELinuxOptions, RunAsUser or FSGroup